Topic: SME as PDC INFO

[RAID]

Hi if I would like to use SME server as PDC for Windows clients and everything go OK it allow me to join MS client to SME server, what will user right will be on client side. Will all users be guest or power user or even administrator on client machine something which is easy to do on Windows Server? Is this possible some how at list for user to have guest account so nothing cannot install or configure?

Thanks,

RAID

[arthurhanlon]

I too am quite interested on how this works as I noticed that the user I use on the SME server doesn't have a lot of rights on the desktop machines. It may be something that needs set on the Windows machines themselves.

It'll be interesting to see what replies come through.

Cheers,

Arthur

[raem]

A default install (of Win2K) should have all Windows users with standard user rights. You need to change user rights on each workstation, you can make all authenticated users a member of whichever group you want eg power users, and then all users who login and authenticate against the sme PDC will have power users rights.

[RAID]

I do not get it Ray; you are saying that I need to create every single user on every workstation to have mobility of the user and their rights on desktop machine when they log on domain.
Is it possible to create let say GUEST group on SME PDC and add user to that group and after that user will have basic right on workstation or some other group.
To some users I would like to allow having rights to install program on workstation and to others to deny. Is this possible to do with SME?
Basically is some how possible to control user privileges on workstation using SME Server?  

Thanks to all of you.
RAID

[ntblade]

On our 2k domain any user can log on to any machine authenticating to the 2k domain controller (DC) (It's 2003 actually but never mind) providing there is a user account on the DC and have rights assigned on the DC.  Users can gain admin rights on their own machines by logging on as as administrator and creating a local account with the same user name as the account on the DC, the user is put in the administrator group and made a member of the domain.

This only works on Win 2k and XP Pro but not XP Home.

Hope this helps.
N

[RAID]

I perfectly understand what you are saying N but it is MS world. I would like to know what is happening with SME server and is it some how possible to customize it as I mentioned before.

Thanks for your help.

RAID

[bluepolo]

You will need to (manually) modify the samba config to achieve this. If Wedmin was allowed you could use Webmin to config Samba, but Webmin is not allowed. But I suppose that the SME SMB config routine might over-write your changes?

[jackl]

RAID

I think this can be done see quote from HP Website
http://docs.hp.com/en/B8725-90021/ch04s04.html

A Samba Server can be configured as a PDC to map a Windows NT domain guest group to the Unix group.

Modify the smb.conf file to set the global parameter named domain guest group to point to the Unix guest built-in group and user. Example:

[global]
domain guest group = guest @guest

In this example, a group called "guest" should be created by the user in the /etc/group file.

However you can use server manager to create the group. Edit the smb.conf file last, restart samba check to see if it works.
If it does what you want you will now need to create a custom template to prevent your settings in smb.conf from being over written when server manager makes changes to the samba configuration.

Regards
Jack